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1. In a computerized system that includes one or more clients accessing a 
gateway and content server that are part of a network, wherein access to the content server 
requires authentication credentials, the network maintaining gateway authentication 
credentials that specify one or more access privileges tailored to access through the gateway, 
a method of authenticating a client comprising a gateway performing the acts of: 

defining an authentication filter that maps authentication credentials received 
from clients according to pre-established criteria; 

receiving authentication credentials from a client; 

mapping the received authentication credentials based on the pre-established 
criteria, the mapped authentication credentials matching gateway authentication 
credentials maintained on the network and corresponding to client access through the 
gateway; and 

sending the mapped authentication credentials to the network, wherein the 
client's access to the content source is determined from the mapped authentication 
credentials. 

2. A method as recited in claim 1 wherein gateway authentication credentials 
and other authentication credentials are maintained in separate domains, and wherein the act 
of mapping the received authentication credentials includes changing a domain name that is 
part of the received authentication credentials. 

3. A method as recited in claim 2 wherein the act of mapping the received 
authentication credentials includes replacing the domain name that is part of the received 
authentication credentials with another domain name. 
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4. A method as recited in claim 1 wherein the gateway authentication 
credentials are maintained in a credential database that is administered separately from 
domain authentication credentials and recognized by the content server only in 
authenticating client access through the gateway. 

5. A method as recited in claim 1 wherein gateway authentication credentials 
and other authentication credentials share a common domain, and wherein the act of 
mapping the received authentication credentials includes changing a username that is part of 
the received authentication credentials. 

6. A method as recited in claim 5 wherein the act of mapping the received 
authentication credentials includes adding a suffix to the username. 

7. A method as recited in claim 5 wherein the act of mapping the received 
authentication credentials includes adding a prefix to the username. 

8. A method as recited in claim 1 wherein the client includes one or more 
identified wireless application protocol servers providing gateway and content server access 
to one or more other clients, the method further comprising the act of accepting 
authentication credentials only from the one or more identified wireless application protocol 
servers. 
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9. A method as recited in claim 1 wherein the gateway authentication 
credentials correspond to other authentication credentials that allow access to a content 
server, and wherein a trust relationship exists between the gateway authentication 
credentials and other authentication credentials with respect to one or more access 
privileges, the method further comprising the acts of: 

receiving a request for content available at the content server; 
sending the request to the network; 
receiving the requested content from the network; and 
sending the received content to the client. 

10. A method as recited in claim 9 wherein the content available at the content 
server comprises email content. 

11. A method as recited in claim 9 wherein the one or more access privileges 
included within the trust relationship that exists between the gateway authentication 
credentials and the other authentication credentials comprise a delegate access permission. 
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12. In a computerized system that includes one or more mobile clients accessing 
a mobile gateway and content server that are part of a network, wherein access to the content 
server requires authentication credentials that may contain a combination of numbers, upper 
case letters, lower case letters, and punctuation, and wherein at least some of the mobile 
clients use relatively short authentication credentials or have an input system that is 
optimized for numeric input rather than for letters or punctuation, the network maintaining 
mobile authentication credentials that specify one or more access privileges tailored to 
mobile client access, a method of authenticating a mobile client comprising a mobile 
gateway performing steps for: 

altering authentication credentials to produce mapped authentication 
credentials that match mobile authentication credentials maintained on the network; 

identifying a mobile client to the network using the altered authentication 
credentials; and 

accessing content provided by the network in accordance with the access 
privileges allowed by the mobile authentication credentials. 

13. A method as recited in claim 12 wherein the step for altering authentication 
credentials comprises the acts of: 

defining an authentication filter that maps authentication credentials received 
from mobile clients according to pre-established criteria; and 

mapping the received authentication credentials based on the pre-established 

criteria. 
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14. A method as recited in claim 12 wherein the step for identifying a mobile 
client comprises the acts of: 

receiving authentication credentials from a mobile client; and 

sending mapped authentication credentials to the network, wherein the 

mobile client's access to the content source is determined from the mapped 

authentication credentials. 

15. A method as recited in claim 12 wherein the step for altering authentication 
credentials includes changing at least one of a domain name and a username that are part of 
the authentication credentials. 

16. A method as recited in claim 15 wherein changing at least one of the domain 
name and a username includes either adding a suffix to the username or replacing the 
domain name with another domain name. 

17. A method as recited in claim 12 wherein the mobile authentication 
credentials are maintained in a credential database that is administered separately from 
domain authentication credentials and recognized by the content server only in 
authenticating mobile clients. 

18. A method as recited in claim 12 wherein mobile authentication credentials 
and other authentication credentials share a common domain. 
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19. A method as recited in claim 12 wherein the mobile client includes one or 
more identified wireless application protocol servers providing mobile gateway and content 
server access to one or more other mobile clients, the step for identifying a mobile client 
comprising the act of accepting authentication credentials only from the one or more 
identified wireless application protocol servers. 

20. A method as recited in claim 12 wherein the step for accessing content 
provided by the content server comprises the acts of: 

receiving a request to access content from the mobile client; 
sending the request to the network; 
receiving the requested content from the network; and 
sending the received content to the mobile client. 

21 . A method as recited in claim 20 wherein the content is email content. 

22. A method as recited in claim 12 wherein a trust relationship exists between 
the mobile authentication credentials and other authentication credentials with respect to one 
or more access privileges. 

23. A method as recited in claim 22 wherein the one or more access privileges 
included within the trust relationship that exists between the mobile authentication 
credentials and the other authentication credentials comprise a delegate access permission. 
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24. In a computerized system that includes one or more mobile clients accessing 
a mobile gateway and content server that are part of a network, wherein access to the content 
server requires authentication credentials that may contain a combination of numbers, upper 
case letters, lower case letters, and punctuation, and wherein at least some of the mobile 
clients use relatively short authentication credentials or have an input system that is 
optimized for numeric input rather than for letters or punctuation, the network maintaining 
mobile authentication credentials that specify one or more access privileges tailored to 
mobile client access, a computer program product that implements a method of 
authenticating a mobile client, comprising: 

a computer readable medium for carrying machine-executable instructions 
for implementing the method; and 

wherein said method is comprised of machine-executable instructions for a 
mobile gateway performing the acts of: 

defining an authentication filter that maps authentication credentials 
received from mobile clients according to pre-established criteria; 
receiving authentication credentials from a mobile client; 
mapping the received authentication credentials based on the 
pre-established criteria, the mapped authentication credentials matching 
mobile authentication credentials corresponding to the mobile client and 
maintained on the network; and 

sending the mapped authentication credentials to the network, 
wherein the mobile client's access to the content source is determined from 
the mapped authentication credentials. 
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25. A computer program product as recited in claim 24 wherein mobile 
authentication credentials and other authentication credentials are maintained in separate 
domains, and wherein the act of mapping the received authentication credentials includes 
changing a domain name that is part of the received authentication credentials. 

26. A computer program product as recited in claim 25 wherein the act of 
mapping the received authentication credentials includes replacing the domain name that is 
part of the received authentication credentials with another domain name. 

27. A computer program product as recited in claim 24 wherein the mobile 
authentication credentials are maintained in a credential database that is administered 
separately from domain authentication credentials and recognized by the content server only 
in authenticating mobile clients. 

28. A computer program product as recited in claim 24 wherein mobile 
authentication credentials and other authentication credentials share a common domain, and 
wherein the act of mapping the received authentication credentials includes changing a 
username that is part of the received authentication credentials. 

29. A computer program product as recited in claim 28 wherein the act of 
mapping the received authentication credentials includes adding a suffix to the username. 

30. A computer program product as recited in claim 28 wherein the act of 
mapping the received authentication credentials includes adding a prefix to the username. 
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31. A computer program product as recited in claim 24 wherein the mobile 
uthentication credentials correspond to other authentication credentials that allow access to 

content server, and wherein a trust relationship exists between the mobile authentication 
redentials and other authentication credentials with respect to one or more access 
rivileges, the method further comprising computer-executable instructions for performing 
he acts of: 

receiving a request for content available at the content server; 
sending the request to the network; 
receiving the requested content from the network; and 
sending the received content to the mobile client. 

32. A computer program product as recited in claim 31 wherein the content 
tvailable at the content server comprises email content. 

33. A computer program product as recited in claim 31 wherein the one or more 
iccess privileges included within the trust relationship that exists between the mobile 
luthentication credentials and the other authentication credentials comprise a delegate 
iccess permission. 
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34. A computer program product as recited in claim 24 wherein the mobile client 
includes one or more identified wireless application protocol servers providing mobile 
gateway and content server access to one or more other mobile clients, the method further 
comprising computer-executable instructions for performing the act of accepting 
authentication credentials only from the one or more identified wireless application protocol 
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